PT-2026-60860 · Ibm · Langflow Oss

CVE-2026-7755

·

Published

2026-07-17

·

Updated

2026-07-23

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.0
Description Remote code execution is possible due to incomplete validation enforcement on MCP server configuration files.
Recommendations Update IBM Langflow OSS to a version later than 1.10.0.

Fix

DoS

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2026-7755

Affected Products

Langflow Oss